How To Add Or Update A DNSSEC DS Record

This guide explains how to add or update A DNSSEC DS Record provided from your nameserver provider.

Domain Name System Security Extensions (DNSSEC) is a security feature that helps protect your domain against DNS-based attacks, such as DNS spoofing and cache poisoning. It does this by digitally signing DNS records, allowing DNS resolvers to confirm that the information they receive is genuine and has not been altered.

Enabling DNSSEC creates a trusted link between your domain registration and the authoritative name servers responsible for your DNS records. This trust is established using Delegation Signer (DS) records, which verify the DNSSEC keys associated with your domain.

Before You Begin

Ensure that:

• Your domain is active and registered with Domains.co.za.
• You have access to your Domains.co.za Customer Portal.

How to Add or Update a DNSSEC DS Record

Step 1: Login to the Customer Portal.

1. Login to your Domains.co.za Customer Portal.

2. Open the Manage Services drop-down menu.

3. Select Domains.

4. Click Manage next to the domain you wish to configure.

Step 2: Verify Your Nameservers

Before adding any DS records, confirm that your domain is using the correct nameservers. This would be your hosting company’s nameservers that provides the DS/DNSSEC records:

Step 3: Adding of DS records

• Select Edit DS Records and add the provided details obtained from your nameserver provider’s DS records, click Add after submitting all the required information.

Step 4: Verify DNSSEC

• After the DS records have been added:
• Confirm that your website loads correctly.
• Verify that your email services continue to function normally.
• Allow time for DNS changes to propagate across the Internet.

Troubleshooting

• My Domain Is No Longer Reachable: This usually occurs when the DS records has been added incorrectly or the DNSSEC service is not fully active with your nameserver provider.
• DNS Changes Have Not Taken Effect: DNSSEC changes may take some time to propagate. Wait for DNS propagation to complete before testing again.
• My Website or Email Is Not Working: Confirm that your domain is using the correct nameservers and that the correct DS records have been added successfully. If the issue persists, contact Domains.co.za Support or your nameserver provider’s Support.

Additional Information

• DNSSEC helps protect your domain against DNS spoofing and cache poisoning attacks by validating DNS responses.
• You will need to manually enter DS record values when using a third party’s nameservers and their DNSSEC service.
• DNSSEC protects the integrity of DNS responses but does not encrypt DNS traffic.
• DNS propagation may take some time after enabling DNSSEC before the changes are visible worldwide.
• If you are unsure whether your domain is using the correct nameservers, contact the Domains.co.za Support team before enabling DNSSEC or adding any DS records.

Login to Domains.co.za Account

1. Go to the Domains.co.za website Account Login page.

2. Enter your Email and Password and click the Sign In button.

3. You will see the Domains.co.za Dashboard, displaying the Manage Account menu on the left and your Account Information, Account Overview and Open Support Tickets on the right.